Forum Discussion
jmasgalas
Nimbostratus
NimbostratusWeb Server HTTP Header Internal IP Disclosure
One of my virtual servers returns the vulnerability Web Server HTTP Header Internal IP Disclosure during a Nessus scan. Security is asking me to fix this but I am not sure how. I tried creating a tra...
tiziano_rosato
Cirrus
Cirrusthey are refering to the easily to decode cookie BIGipServersecuritycode_pool , once decode you'll see the pool member IP address.
Easy solution is to encrypt the cookie.
Have a look into this great github page:
https://github.com/dnkolegov/bigipsecurity#persistence-cookie-information-leakage